Re: XP encryption



That is because the p7b file contains only your public key - not the private
key needed to decrypt your files. A file with a .pfx extension that prompted
you for a password to protect the private key would be needed. Without the
private key for the user or Recovery Agent [if used which it is not by
default in XP Pro] you will not be able to decrypt your files which were
encrypted with either 3DES or AES. Depending on how you did your rebuild,
if your user profile from the previous install is intact [or in a backup
somewhere] you may still be able to recover your EFS files because the EFS
private key is stored in the user profile. There is a EFS recovery program
from Elcomsoft that even the free limited trial version will try to find and
help you recover your EFS private key so that you can at least see if it is
available or not. --- Steve

http://www.elcomsoft.com/aefsdr.html --- Elcomsoft
http://support.microsoft.com/default.aspx?scid=kb;EN-US;223316 --- EFS
best practices

"Stan" <Stan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C4EBABF2-15C9-4E61-AD9A-1FEAE54C1DFA@xxxxxxxxxxxxxxxx
I had to rebuild my XP after a failed Linux install. I have previous
encrypted files, which XP doesn't open now. I have tried to import my
previous encryption certificate, but it is a p7b extension, and my XP says
it
needs p12b and won't allow me to import it. What's up? Help.
--
Stan


.



Relevant Pages

  • Recovery agent cert
    ... Trying to export the recovery cert along with the private ... This works from the first domain but not the second. ...
    (microsoft.public.win2000.security)
  • Re: EFS Private Keys
    ... The user and recovery agent private EFS keys are stored in the associated user ... To protect your EFS files when physical security can not be assured, ...
    (microsoft.public.win2000.security)
  • Re: decrypting a file question
    ... EFS has a way of biting people when it comes to accessing their own files. ... The EFS "private" key that is used to decrypt files is stored in the user ... profile of the user account that encrypted the file and the Recovery Agent ... certificate needs to show that "you have the private key that corresponds ...
    (microsoft.public.win2000.security)
  • Re: Data security question in MCSE 70-270 exam
    ... I would not consider EFS safe with a domain account either as long as the EFS private ... In a default installation of W2K, syskey is implemented and the operating system ...
    (microsoft.public.win2000.security)
  • Re: Div. IBM Frage
    ... Zertifikate ja auch vom Rechner ... > Und wie willst du dann EFS weiterhin nutzen, ... Smartcard, bei der der Private Schlüssel in einem Bereich liegt, der ... Next by Date: ...
    (de.comp.sys.notebooks)